Who Actually Gets Targeted in Liverpool, and With What
People ask me what the cyber threat landscape looks like in Liverpool as if there is one answer. There is not. What lands in your inbox depends almost entirely on who the criminal thinks you are. A second year student in Kensington and a retired couple in Formby get approached in completely different ways, by different people, with different bait. So instead of another list of scary statistics, here is what I actually see happening to four different groups of Liverpool people, and what tends to stop it.
Students and Young Renters
The student population here is enormous, and criminals know exactly when term starts.
The two I see constantly are the accommodation deposit scam and the fake part time job. The accommodation one runs on urgency. A flat appears on a listings page or a housing group at a suspiciously good price, the landlord is away and cannot do viewings, and there are three other people interested, so send the deposit today. The money goes and the flat never existed.
The job version is quieter and more damaging. An easy remote role, a friendly interview over a messaging app, and then a request for bank details for payroll before any work happens. Sometimes the account is then used to move other people's stolen money, which turns a victim into a suspect.
The other thing that catches this group is public wifi. Cafes, libraries, the university buildings, the train. Most of it is fine now, but if you are logging into banking from a network you did not set up, a VPN is a sensible habit rather than paranoia. It is one of the reasons I keep NordVPN in my own kit.
Parents Running a Household
If you are the person who sorts the bills, the school payments, the online shop and the family phone contracts, you are handling more accounts than anyone else in the house, and that is exactly why you get hit.
The dominant one right now is the delivery message. You genuinely are expecting three parcels, so a text about a missed delivery and a small redelivery fee does not feel absurd. The fee is not the point. The card details are.
Close behind is the school or club payment message. Someone spoofs a name you recognise, mentions a trip or a kit order, and asks you to pay by bank transfer instead of the usual portal. The tell is always the same. A change to how you normally pay is the single most reliable warning sign in any scam, and it applies whether the message claims to be from a school, a builder, or your own bank.
The habit that fixes most of this is not a piece of software. It is a rule that you never pay anyone from a link in a message. You go to the app or the website you already use.
Retired People, and Why the Stereotype Is Wrong
I want to be careful here, because the assumption that older people are hopeless with technology does more harm than the scams do. Plenty of my sharpest clients are in their seventies. The difference is not skill. It is that criminals put far more effort into this group, because that is where the savings are.
The approaches are more personal. A phone call rather than a text. A conversation that builds over days. Someone claiming to be from the bank's fraud team, who already knows your name and the last four digits of your card, asking you to move money to a safe account. No bank will ever ask you to do that, and anyone who does is stealing from you.
The strongest protection I have found is social rather than technical. Agree with your family that any request involving money gets a second opinion before anything moves, and that nobody will ever be annoyed at being asked. Scammers rely on isolation and embarrassment. A household that talks openly about this is a genuinely hard target.
Small Traders and Sole Directors
Liverpool runs on small operations. One van, one salon, one consultancy, one person doing everything including the invoicing.
The one that costs the most is invoice interception. Someone gets into an email account, watches quietly for a while, then sends a real customer a real invoice with changed bank details. The customer pays in good faith, the money is gone, and both sides think they have been robbed by the other. It is not exotic and it is not rare.
The fix is dull and it works. Two factor authentication on the business email account, and a stated policy that bank details are confirmed by phone on a number you already had. Two minutes on a call beats four thousand pounds down the drain.
The second one is the fake supplier or directory invoice. Official looking, modest amount, plausible reference number. Sole traders pay these because they are busy and it is easier than querying it. If you do not recognise it, do not pay it.
What All Four Groups Have in Common
Look at those four lists and the same shape appears every time.
There is always time pressure. There is always a reason you cannot check through your normal channel. There is always a payment method that is unusual for you. And there is always a story that explains why this time is different.
Which means the defence is the same for everyone regardless of age or job. Slow down, verify through a route you chose rather than one you were handed, and turn on two factor authentication for your email before anything else, because email is the master key to everything.
If you want the specific tools I actually recommend rather than a general list, they are all on my Safety Toolkit page. And if something has already happened to you, report it to Action Fraud rather than staying quiet about it. Reporting is what turns one person's bad afternoon into a pattern the police can actually act on.